Mission
We are looking for a technically capable Cyber Security Analyst to support detection, analysis, and coordination of security events across corporate and product environments. You will act as the internal point of coordination for security incidents, working closely with our external SOC and internal engineering teams to ensure alerts are translated into clear, actionable outcomes. In addition to responding to alerts, you will proactively improve detection capability, logging coverage, and understanding of system behaviour across both corporate IT and product systems, including unmanned platforms.
Role and Responsibilities
* Triage and investigate alerts from SOC and SIEM platforms (e.g. Kibana/Elastic, Splunk)
* Act as the internal coordinator for security incidents, working with the external SOC and internal teams to ensure timely investigation and response
* Ensure alerts are translated into clear, actionable internal outcomes
* Support the development and refinement of detection rules, searches, and queries
* Support onboarding, parsing, and validation of log sources to improve monitoring and visibility
* Proactively review telemetry and alert trends to identify gaps in detection and coverage
* Work with engineering teams to understand system behaviour and improve monitoring capability
* Assist with threat hunting and hypothesis-driven analysis
* Develop and maintain investigation approaches, documentation, and basic response playbooks
* Use scripting to support analysis, enrichment, and small-scale automation
* Develop and maintain dashboards and visualisations within SIEM platforms (e.g. Kibana, Splunk) to support monitoring, investigation, and threat identification
* Continuously refine dashboards based on alert trends, investigations, and evolving threats
* Ensure dashboards clearly reflect meaningful signals rather than raw data
Skills & Experience
* Degree in cyber security, computer science, engineering, or a related technical field
* Understanding of core cyber security principles, attacker techniques, and detection use cases
* Familiarity with Kibana (Elastic), Splunk, or similar SIEM platforms
* Working knowledge of Windows, Linux, and networking concepts
* Basic scripting ability (Python, PowerShell, or similar)
* Strong analytical and problem-solving ability
* Interest in understanding how systems and products behave in real environments
Additional Context
This role works alongside an external SOC, acting as the internal bridge between alerting and response. When not actively responding to incidents, the role focuses on improving detection capability, log coverage, and investigation readiness.
What we have to offer you
* An excellent work environment and an opportunity to make a difference.
* Salary commensurate with level of experience.
* Company pension contribution matched up to 10%.
* 25 days annual holiday + 8 Bank holidays.
* Medical Insurance.
* Dental Insurance.
* Salary sacrifice initiatives (EV Scheme, Cycle 2 Work, Tech Scheme)
* Discretionary annual company bonus.
J-18808-Ljbffr